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INTRODUCTION 


The  practical  use  of  the  mathematical  theory  of  probability 
and  its  intuitive  meaning  in  the  analysis  of  structural  relia¬ 
bility  is  based  on  its  connection  with  real  or  conceptual  experi¬ 
ments,  such  as  the  counting  of  exceedances  of  specified  intensi¬ 
ties  of  loads  or  the  observation  of  the  time-intervals  between  ex¬ 
ceedances  ("return  periods"),  the  counting  of  the  number  of  fail¬ 
ures  in  mechanical  tests  or  in  operation  of  critical  elements  of 
mechanical  systems,  or  the  observation  of  intervals  between  fail¬ 
ures.  For  the  theory  to  be  meaningful,  the  "statistical  popula¬ 
tion"  must  be  clearly  defined  by  specifying  the  possible  outcomes 
of  the  counts  or  observations.  Such  specification  is  of  a  physi¬ 
cal  rather  than  a  probabilistic  nature  and  thus  determines  the 
physical  character  of  the  probabilistic  model.  The  "random  vari¬ 
able"  X  is  defined  over  the  population  in  such  a  way  that  spe¬ 
cific  numerical  values,  either  discrete  or  continuous,  are  as¬ 
signed  to  each  outcome.  A  function  of  x  representing  the  prob¬ 
ability  of  an  outcome  equal  to  or  smaller  than  X  =  x  is  the  "prob¬ 
ability  function"  P(x),  which  is  the  probability  of  occurrence 
of  outcomes  X  ^  x,  while  R(x)  =  1  -  P(x)  is  the  probability  of 
outcomes  X  >  x  in  large  (theoretically  infinite)  numbers  of  ex¬ 
periments  or  observations. 

In  a  physical  situation  the  probability  function  is  usually 
unknown  and  has  therefore  to  be  determined  either 

(a)  by  statistical  inference  from  a  necessarily  limited 
number  n  of  outcomes  ("sample"  of  size  n),  or 

(b)  by  theoretical  reasoning  based  on 

(1)  a  conceptual  experiment,  or 

(2)  a  physical  or  engineering  concept. 

In  the  first  case  statistically  significant  outcomes  must 
be  available  and  presented  in  a  form  suitable  for  inference  of 
the  population  function  P(x)  from  the  plotting  position  of  the 
n  sample  points  F(xm)  where  m  =  1,  2, ...n. 

In  the  second  case  the  population  function  is  directly  de¬ 
rived  from  a  probabilistic  or  from  a  physical  model  without  ref¬ 
erence  to  experiment  or  observation. 

The  limitation  of  the  method  of  statistical  inference  in 
structural  reliability  analysis  can  be  easily  illustrated  by  con¬ 
sidering  the  mean  (cumulative)  frequency  F (x^)  of  the  ra-th  obser- 


vation  of  a  continuous  random  variable  X  in  a  sample  of  size 
n,  in  which  all  observations  have  been  arranged  in  increasing  or¬ 
der 

F(xm)  =  m/(n  +  1)  (1) 

This  expression  has  been  proposed as  the  "plotting  position" 
F(xm)  of  the  m-th  observation  xm  on  probability  paper.  There- 
forej  for  a  sample  size  n  =  10  the  range  of  (cumulative)  fre¬ 
quencies  is  enclosed  between  F(x^)  =  1/11  =  0.091  and  F(x^q)  = 
10/11  =  0.91;  for  n  =  100  the  range  of  frequencies  extends  rough¬ 
ly  from  F(x-l)  =0.01  to  F(xioq)  =0.99.  In  view  of  the  fact  that 
the  frequency  range  of  interest  in  reliability  analysis  is  P(x)  << 
10-3  or  R (x)  >  0.999,  the  fitting  of  observations  F (xm)  by  P(x)  in 
the  range  0.1  <  P(x)  <  0.9  does  not  justify  extrapolation  of  the 
fitted  probability  function  into  the  significant  reliability  range. 

Therefore,  statistical  inference  is  relevant  in  reliability 
analysis  only  when  ^ample  sizes  are  sufficiently  large  to  permit 
a  valid  distinction  between  various  possible  probability  functions 
within  the  frequency  range  enclosed  by  the  sample  size.  The  mean 
or  median  of  a  distribution  may  be  accurately  enough  estimated  on 
the  basis  of  3  to  5  specimens,  the  estimate  of  the  standard  devi¬ 
ation  may  require  as  many  as  10  to  15 .  However  for  the  determi¬ 
nation  of  the  distribution  function  itself  by  pure  statistical  in¬ 
ference  even  one  hundred  specimens  are  certainly  not  enough. 

(2) 

Thus  for  instance  Weibull  has  shown  that  to  make  a  signif¬ 
icant  distinction  between  the  logarithmic-normal  distribution  and 
the  third  asymptotic  distribution  of  smallest  values  ("Weibull  dis¬ 
tribution"),  both  skew  functions  of  apparent  similarity,  a  sample 
size  larger  than  1000  would  be  required.  On  the  other  hand,  when 
these  two  probability  functions  are  alternatively  fitted  to  sam¬ 
ples  of  size  n  =  10  or  n  =  100,  a  range  within  which  no  distinc¬ 
tion  between  them  is  possible,  significantly  different  frequencies 
are  obtained  in  the  range  significant  for  reliability  analysis. 

Statistical  inference  can  therefore  not  be  applied,  unless 
the  sample  size  is  very  large,  a  fact  which  distinguishes  struc¬ 
tural  reliability  theory  from  industrial  statistics:  in  the  lat¬ 
ter  the  emphasis  is  on  the  central  tendency  of  the  probability 
function  and  the  (relatively  narrow)  variation  about  it,  in  the 
former  the  main  interest  is  in  its  form  in  the  extreme  ranges. 

In  industrial  statistics  methods  of  inference  are  used  to  differ¬ 
entiate  between  statistical  populations  characterized  by  their 
means  and  variances.  In  structural  reliability  analysis  where 
the  shape  of  the  distribution  function  is  significant,  sufficLent- 
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ly  large  sample  sizes  for  the  use  of  methods  of  statistical  in¬ 
ference  arise  in  general  only  from  load-observations  and  load- 
records.  Observations  of  material  characteristics  such  as  strength- 
parameters  or  intervals  between  failures  are  generally  limited  in 
number,  the  more  severely  the  larger  and  costlier  the  system  or 
che  structural  element.  Statistical  inference  as  a  basis  of  reli¬ 
ability  analysis  is  therefore  limited  to  load  analysis  and,  possi¬ 
bly,  to  strength  analysis'  of  mass  produced  small  elements  that  can 
be  tested  with  sufficient  replication  under  adequate  control  to 
produce  sufficiently  large,  statistically  homogeneous  samples.  On 
the  other  hand,  the  distribution  and  associated  probability  func¬ 
tions  for  the  strength  bf  large  structural  elements  and  complete 
mechanical  systems  must  be  selected  by  probabilistic-physical  rea - 
soning.  It  is  on  this  basis  alone  on  which  extrapolation  from  a 
small  number  of  test-results  or  observations  into  the  reliability 
range  can  be  justified. 


II.  RELATION  BETWEEN  TESTS  AND  STRUCTURAL  PERFORMANCE 

Statistical  variables  expressing  the  "mechanical  strength"  of 
the  material  are  relevant  to  reliability  analysis  only  if  they  are 
relevant  to  the  structural  performance  for  which  the  reliability 
is  to  be  established.  For  this  purpose  the  results  of .most  stand¬ 
ard  mechanical  tests  used  either  for  purposes  of  quality  control  or 
for  purposes  of  comparison  of  materials  are  useless.  Qualitative 
correlation  between  laboratory  specimen  tests  and  material  perform¬ 
ance  in  the  structure  can,  in  general,  be  established  only  for  de¬ 
formation  characteristics,  such  as  elastic  moduli,  creep-rates, 
yield-limit  and  damping  on  the  basis  of  continuum .mechanical  con¬ 
cepts.  Strength  characteristics  depend  to  such  an  extent  on  geom¬ 
etry,  absolute  size,  surface  conditions  and  environment  that  in  the 
analysis  only  the  results  of  such  tests  can  be  used  that  have  been 
specifically  designed  to  reflect  the  relevant  performance  of  the 
material  in  the  structure  under  the  critical  condition  of  failure 
with  which  the  reliability  analysis  is  associated. 

Failure  in  structures  is  the  result  either  of  the  exceedance 
by  a  very  rare  load  intensity  of  the  initial  resistance  of  the 
structure  to  deformation  instability  ("collapse")  or  to  rapid  frac¬ 
ture  ("ultimate  load  failure"),  or  of  the  exceedance  by  a  some¬ 
what  less  rare  load  intensity  of  the  "residual  strength"  of  the 
structure,  which  is  the  resistance  remaining  at  any  time  t  as  a 
result  of  progressive  damage  produced  in  the  course  of  the  service 
during  time  t  either  by  a  large  number  of  service  load  cycles  of 
relatively  high  frequency  of  occurrence  ("fatigue  failure"),  by  a 
sequence  of  sustained  service  load-temperature-combinations  ('creep- 
fracture")  or  by  a  number  of  combined  load-temperature  cycles. 

Both  rapid  and  progressive  failures  are  preceeded  by  extensive 
redistribution  of  the  internal  forces  in  the  structure;  they  can 
therefore  not  be  reproduced  in  tests  of  simple  specimens.  Except 
for  conditions  of  instability  failure  goverened  by  plastic  col¬ 
lapse  which  depends  on  the  yield  limit,  "materials  testing"  for 
reliability  analysis  therefore  differs  significantly  from  the 
conventional  materials  testing  procedures.  It  is  not  a  material 
parameter  obtainable  from  small  specimen  tests,  but  the  rate  of 
propagation  in  structural  members  and  parts  of  cracks  from  tin- 
avoidable  structural  defects  which  emerges  as  the  most  important 
"material"  parameter  by  which  the  "damage  tolerance"  of  a  struc¬ 
ture  is  determined. 

"Damage  tolerance"  is  the  capability  of  a  structure  to  oper¬ 
ate  after  suffering  a  limited  extent  of  critical  damage;  it  is  of 
particular  significance  in  aircraft  structures.  Structural  reli- 
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ability  testing  to  establish  “damage  tolerance"  can  thus  not  be 
related  to  conventional  materials  testing,  since  it  involves  the 
testing  of  full  scale  structures  or  of  primary  structural  parts 
with  respect  to  such  aspects  of  material  performance  that  are  no 
duplicated  in  standard  mechanical  tests  on  serially  reproducible 
small  or  medium  sized  specimens.  The  most  significant  observati 
in  structural  reliability  testing  is  the  expected  time  to  the  fir 
appearance  of  damage  in  the  structure  and  the  rate  at  which  sue 
damage  propagates  to  produce  actual  failure.  Such  observation  n 
quires  tests  of  the  actual  configuration  of  the  structure  under 
relevant  operating  conditions  or  under  suitably  accelerated  serv 
ice  conditions:  it  is  unobtainable  bv  specimen  tests. 


1  reasx 
tural  p 
g  is  th 


.1- 

ce 

ue 


(3) 

the  t-est  life  shows  ratios  consistently  below  unity 
[Test  life/computed  life]  <  1 

with  wide  scatter  about  a  central  value  of  roughly  2/3.  It  should 
be  noted  however  that  comparison  of  the  life  estimated  on  the  ba¬ 
sis  of  tests  with  actual  service  life (3)  also  consistently  pro¬ 
duces  ratios  below  unity 

[Life  to  service  damage/life  to  test  damage]  <  1 

with  wide  scatter  around  a  central  value  of  roughly  3/3.  Combining 
the  two  ratios  it  would  appear  that  the  computed  fatigue  life  of 
a  full-scale  gust-critical  aircraft  structure  over-estimates  the 
operational  life  by  a  ratio  of  roughly  5:1,  with  some  scatter. 

In  view  of  the  results  of  numerous  series  of  fatigue  tests 
under  programmed  and  random  load  amplitudes  on  material  specimens 
and  small  assemblies  of  various  types,  performed  to  investigate 
the  validity  of  the  rule  of  linear  damage  accumulation,  the  above 
result  does  not  seem  unexpected,  since  the  majority  of  the  results 
of  specimen  tests  show  sums  of  cycle  ratio  substantially  below 
unity,  unless  specific  conditions  of  geometry  or  loading  have  been 
created  to  introduce  residual  compressive  stresses  of  sufficiently 
high  intensity  so  as  not  to  be  affected  by  the  applied  cyclic 
stresses.  It  should  be  noted  however  that  the  correlation  between 
the  type  of  service  fatigue  failure  produced  in  structures  and 
that  observed  in  specimen  tests  is  rather  vague.  Thus,  for  in¬ 
stance,  many  structural  failures  are  the  result  of  fretting,  a 
failure  type  that  is  quite  uncommon  in  well-designed  specimen 
tests  in  which  fretting  failure  in  the  grips  is  rare.  Hence  the 
above  agreement  between  the  tendency  of  the  results  of  specimen 
fatigue  tests  and  of  the  fatigue  performance  of  full-scale  struc¬ 
tures  with  respect  to  the  values  computed  by  the  linear  damage 
rule  is  somewhat  unexpected  and  not  too  much  reliance  should  be 
placed  on  it,  unless  it  is  validated  for  the  particular  struc¬ 
tural  configuration  by  at  least  one  full-scale  fatigue  test  under 
a  representative  load  spectrum. 


It  follows  that 


1/a 

^  ■  *o  +  (v  -  V  Hn  (1-^r>]  <6> 

The  time  to  the  first  failure  is  obtained  for  m  =  1. 

Disregarding,  in  first  approximation,  the  lower  limit  tQ 
the  reliability  function  has  the  form 

R (t)  =  exp  [-  (t/v)aJ  (7) 

The  expected  time  to  the  first  failure  (expected  shortest  life) 
is  obtained  from  Eg.  (6)  with  tQ  =  0. 

.  1/a 

=  v  [-  to  (l  -  — )]  (8) 

Introducing  the  relation  between  a  and  the  coefficient  of 
variation  a (log  t) 

a  (log  t)  =  v/  (2. 3O3C0S)  (9) 

which  has  been  plotted  in  Fig.  2,  and  the  relation  between  the 
mean  t  and  the  characteristic  value  v 

t  =  v  T(1  +  1/a)  (10) 

Eq. (8) can  be  transformed  into  a  relation  between  the  ratio  (t^/ 
1)  of  the  expected  time  to  first  failure  to  the  expected  (mean) 
time  to  failure  and  the  standard  deviation  a (log  t) .  This  re¬ 
lation  is  plotted  in  Fig.  3  for  the  population  sizes  n  =  20,  50, 
200  and  1000. 

Using  these  diagrams  it  can  be  seen  that  in  a  fleet  of  mod¬ 
erate  size,  such  as  n  —  50,  the  expected  time  to  the  first  fail¬ 
ure  for  0.15  ^  a  (log  t)  £  0.20  is  0.35E  >  t^  >  0.25E.  For  a 
larger  fleet  of  n  =  1000  and  the  same  range  of  scatter  the  ex¬ 
pected  time  to  the  first  failure  0.13t  >  t^  >  0.08t.  Hence,  de¬ 
pending  on  the  fleet  size,  observed  times  to  failure  of  between 
one-third  and  one-tenth  of  the  mean  time  to  failure  cannot  be 
considered  unusual.  In  fact,  in  view  of  the  scatter  associated 
with  the  expected  times  to  first  failure,  values  smaller  than 
the  estimate  of  the  expected  time  t^  will  frequently  be  ob¬ 
served.  Since  the  time  to  first  failure  is  an  extremal  phenom¬ 
enon,  it  is  to  be  expected  that  its  distribution  is  an  extremal 
distribution  of  smallest  values,  which  is  the  condition  of  sta- 
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bility  characterizing  such  distributions. 

Within  the  range  of  0.15  £  a  (log  t)  £  0.20  the  expected  times 
to  the  second  failure  are  0.46E  >  t2  >  0.34t  for  n  =  50  and  0.21E 
>  t2  >  0.14E  for  n  =  1000.  This  implies  mean  intervals  between 
the  first  and  second  failures  of  0.11E  a  (t2  -  tj)  S:  0.09t  for 
n  =  50  and  0.08E  a  (t^  -  t^)  ^  0.06E  for  n  =  1000. 

If  the  expected  time  to  the  first  failure  t^  is  specified  as 
a  design  criterion,  the  mean  time  to  failure  for  which  a  fleet 
has  to  be  designed  becomes  a  function  of  the  anticipated  size  of 
the  fleet.  Thus,  for  instance,  for  an  anticipated  scatter  in  the 
fatigue  performance  of  the  structure  characterized  by  a (log  t)  = 
0.15  the  design  mean  time  to  failure  is  E  ~  3t^  for  n  =  50  and* 
t  ~  7.5t^  for  n  =  1000.  The  associated  expected  intervals  to  the 
second  failure  are  therefore  roughly  0.3t^  and  0. 53t^  respectively. 
It  is  obvious  that  because  t^  is  a  statistical  design  for  an  'ex¬ 
pected  value  of  also  implies  a  certain  risX  of  failure  which 
can  be  expressed  by  a  reliability  function. 

For  n  =  2  (smallest  sample  size)  the  value  of  t^  is  fairly 
close  to  the  mean  E  (0.88t  >  t^  >  0.81E).  The  expected  life  to 
first  failure  in  such  sample  size  provides  hardly  more  informa¬ 
tion  concerning  the  expected  life  to  first  failure  in  an  associ¬ 
ated  population  than  the  mean  itself. 


IV.  USES  OP  "TIME  TO  FIRST  FAILURE"  IN 
RELIABILITY  ANALYSIS 


The  difference  between  sample  size  and  fleet  size  must  be 
considered  in  the  planning  and  evaluation  of  so-called  "lead 
tests"  in  which  a  very  small  number  of  units  of  the  fleet  are 
subjected  to  tests  under  an  accelerated  service  spectrum  start¬ 
ing  simultaneously  or  in  advance  of  the  operation  of  the  fleet. 

In  order  for  the  first-failure  in  the  lead  test  to  occur  before 
the  first  failure  in  the  fleet  the  relation  must  be  satisfied 

tlL  <  tx(n)  +  tQ  or  tL  =  p"1  (tQ  +  yt)  (11) 

where  t^  is  the  required  mean  time  to  failure  in  the  lead  group 
of  size  nj,,  tQ  the  interval  between  the  start  of  the  lead  tests 
and  the  start  of  the  service  operation,  and  the  coefficients  |3 
and  y  are  functions  of  n  obtained  from  ti  t,  =  f3EL  and  =  yt. 
Thus  for  a (log  t)  =  0.15,  nL  =  2,  n  =  50  and  tQ  =0:  tL<  0.4t, 
a  result  which  indicates  that  the  necessary  intensification  or 
acceleration  of  the  iead  test  load  spectrum  must  be  such  as  to 
reduce  the  mean  time  to  failure  by  a  factor  of  more  than  2.5  if 
the  lead  test  is  to  be  of  any  use.  For  a  large  fleet  (n  =  1000) 
tL  <  0.15t  which  implies  a  reduction  of  the  mean  time  to  failure 
is  the  lead  test  by  a  factor  of  6.7. 

A  considerable  advantage  of  the  use  of  the  time  to  first 
failure  in  reliability  analysis  arises  from  the  fact  that  the 
precision  of  its  estimate  increases  with  n  more  rapidly  than 
the  precision  of  the  estimate  of  the  mean  or  of  the  character¬ 
istic  value.  Since  the  probability  for  the  minimum  of  n  ob¬ 
servations  from  an  initial  extreme  value  distribution  to  exceed 
t^  is  t  a 

R(tl>  =  e*P  [‘  <  1^)  ]  (12) 

where  t^  is  the  expected  value  of  t^  and  the  scale  factor  a 
remains  unchanged,  it  is  obvious  that  the  distribution  of  the 
minima  contract  with  increasing  number  of  extremes.  The  vari¬ 
ances  of  the  minimum  of  the  smallest  values 


decrease  with  increasing  n. 

In  another  application  of  concepts  of  order  statistics  in 
reliability  analysis  the  two  shortest  observed  times  to  failure, 
being  considered  the  weakest  members  of  a  sample,  might,  in  first 

10 


approximation,  be  considered  to  belong  to  an  extremal  distribu¬ 
tion  of  unknown,  parameters.  A  rough  estimate  of  the  two  para¬ 
meters  v  and  a  of  this  distribution  can  be  obtained  by  solv¬ 
ing  the  two  Eqs.  (6)  for  m  =  1  and  m  =  2  under  the  simplifying 
assumption  tQ  =  0.  The  resulting  distribution  can  be  used  to 
predict  the  expected  times  to  first  failure  in  larger  samples. 


observed 


Thus,  for  instance,  the  shortest  times  to  fa  igue  da] 
ved  in  a  sample  of  40  aircraft^  '  were  t^  =  1500  hrs 


damage 
rs  and 


=  1733  hrs. 


Solving  the  two  equations 

H  “  v  [-  in  C1  “  «)]  / 


t2  =  v  [-  (i  -  !£)] 


the  values  for  the  parameters  of  the  extremal  distribution  are 
v  =  1.78  t2  =  3100  hrs  and  a  =  5.1  or  a (log  t)  =  0.11;  therefore 
t  ~  0.92  x  3100  ss  2850.  Hence,  for  a  fleet  of  n  =  200  the  ex¬ 
pected  time  to  the  first  fatigue  damage  of  the  type  observed 
would  be  ti  =  0.38t  =  1100  hrs. 

In  view  of  the  considerable  difference  between  the  mean  or 
characteristic  times  to  failure  and  the  expected  time  to  first 
failure,  and  of  the  effect  of  the  parameter  a  on  this  differ¬ 
ence,  the  fatigue- sensitivity  factor of  the  structure  might 
be  related  to  the  ejected  times  to  first  failure  in  a  fleet  of 
a  certain  size  rather  than  to  the  risk  of  failure  of  mean  times 
to  failure  in  a  fleet  of  indeterminate  size.  If  vy  denotes 
the  expected  time  to  ultimate  load  failure  associated  with  an 
exponential  reliability  function  (with  a  =  1),  and  vF  the  ex¬ 
pected  time  to  fatigue  failure  with  a  =  aF,  the  fatigue  sensi¬ 
tivity  factor  f  based  on  expected  times  to  failure'7' 


while  an  alternative  definition  of  the  fatigue  sensitivity  factor 
of  the  form 


relates  the  fatigue  sensitivity  at  time  t^  to  fleet  size.  It  is 
obvious,  that,  because  of  the  short  times  t^  to  first  failure  the 
constant  fatigue  sensitivity  at  t^  according  -to  Eq.  (14)  is  much 
lower  than  that  defined  by  Eg.  (13)  for  ,t  >  t^  which  is  an  in¬ 
creasing  function  of  time.  This  is  mainly  due  to  the  fact  that 
the  expected  time  to  the  first  failure  for  the  exponential  dis¬ 
tribution  (o  =1)  characteristic  of  ultimate  load  failures  is  a 
much  smaller  fraction  of  the  expected  time  to  failure  than  for 
the  extremal  distributions  (aF  > 1)  characteristic  for  fatigue 
failures.  Thus,  for  instance,  for  n  =  50  the  expected,  time  to 
first  failure  for  an  exponential  reliability  function  is  t^  = 
0.0202  Vy,  while  for  n  =  200  this  time  is  tj,  =  0.005  vg.  There¬ 
fore  very  long  mean  times  to  failure  that  are  governed  by  chance 
do  not  provide  adequate  safety  against  premature  failures  even 
in.  medium  size  populations. 

Comparing  the  above  expected  times  to  first  ultimate  load 
failure  with  those  computed  for  fatigue  failures  it  appears  that 
in  order  to  ensure  equal  expected  times  to  first  failure  for  ulti¬ 
mate  load  and  fatigue  failure  (disregarding  the  fact  that  for  long 
operational  periods  ultimate,  load  failures. become  failures  of  the 
fatigue-damaged  structure,  because  of  the  relatively  short  times 
considered)  the  ratios  between  Vy  and  Vp  required  to  prevent  pre¬ 
mature  chance  failures  are  (Vy/Vp)  >10  already  fpr  n  =  50  and  much 
higher  for  larger  fleets. 

The  above  analysis  illustrates  the  ambiguities  encountered 
in  the  comparison  between  life  estimates  based  on  tests  and  fa-r 
tigue  lives  observed  in  service,  and  the  necessity  of  comparing 
not  mean  lives  but  expected  lives  to  first  failure  in  the  relia¬ 
bility  analysis  of  even  a  moderately  large  population  based  on  . 
the  results  of  a  very  small  number  of  tests.  Comparison  of  means 
alone  are  quite  misleading  in  the  reliability  assessment  of  such 
a  population  particularly  when,  as  in  the  case  of  large  struc¬ 
tures,  the  purpose  of  the  reliability  analysis  is  the  prevention 
of  failure  of  even  a  single  member  of  the  population.  Because 
this  requirement  seems  to  be  the  only  rational  requirement  for 
the  design  of  structures  failure  of  which  is  in  effect,  inadmis¬ 
sible,  such  as  large  transport  aircraft,  it  appears  that  design 
for  a  specified  time  to  first  failure  associated  with  a  reason¬ 
ably  low  risk  should  replace  the  current  approach  of  design  for 
a  specified  mean  service  time  coupled  with  a  vague  "scatter  fac¬ 
tor"  . 
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